> Furthermore, telegram forces you to link your account with a phone number, and that acts as the primary (or only) form of authentication, opening you up to sim-jacking.

Linking phone or use it for 2FA should be like red light today. For Telegram, banking app, don't matter.